Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-25440
HistoryMay 23, 2023 - 1:15 a.m.

Cross site scripting

2023-05-2301:15:00
PRIOn knowledge base
www.prio-n.com
3
stored cross site scripting
civicrm 5.59.alpha1
execute arbitrary code

0.001 Low

EPSS

Percentile

43.1%

Stored Cross Site Scripting (XSS) vulnerability in the add contact function CiviCRM 5.59.alpha1, allows attackers to execute arbitrary code in first/second name field.

CPENameOperatorVersion
civicrmeq5.59 alpha1

0.001 Low

EPSS

Percentile

43.1%